PT-2023-31440
CVE-2023-49981
·
Publicado
2023-12-20
·
Atualizado
2024-08-05
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
School Fees Management System version 1.0
Description
A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization.
Recommendations
For School Fees Management System version 1.0, consider restricting access to sensitive directories and files to minimize the risk of exploitation. As a temporary workaround, review and adjust the application's configuration to require proper authorization for directory listings.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾